chore(deps): bump the production-dependencies group across 1 directory with 15 updates by dependabot[bot] · Pull Request #243 · spiritledsoftware/caplets

dependabot · 2026-07-24T10:38:32Z

Bumps the production-dependencies group with 15 updates in the / directory:

Package	From	To
typescript	`6.0.3`	`7.0.2`
@sentry/browser	`10.67.0`	`10.68.0`
@tanstack/virtual-core	`3.17.5`	`3.17.6`
posthog-js	`1.405.3`	`1.407.2`
@tanstack/react-virtual	`3.14.7`	`3.14.8`
lucide-react	`1.25.0`	`1.26.0`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
shadcn	`4.13.1`	`4.14.1`
@astrojs/starlight	`0.41.3`	`0.41.4`
@aws-sdk/client-s3	`3.1091.0`	`3.1094.0`
@sentry/bun	`10.67.0`	`10.68.0`
@sentry/node	`10.67.0`	`10.68.0`
add-mcp	`1.13.0`	`2.0.0`
hono	`4.12.31`	`4.12.32`

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @sentry/browser from 10.67.0 to 10.68.0

Release notes

Sourced from @sentry/browser's releases.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/browser's changelog.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Commits

b4396c3 release: 10.68.0
be21e8c meta(changelog): Update changelog for 10.68.0 (#22566)
fb0987f feat(v10): Add http.route attribute to http.server spans with parameteriz...
f7bd901 feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)
ed3a8c8 feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)
20227f9 feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)
3e5625e feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)
d924551 test(v10/cloudflare): Add Vite-build support to the integration-test runner (...
11fed03 feat(v10/cloudflare): Read wrangler config and resolve the Sentry options mod...
a540764 feat(v10): Add url.full and url.path to http.server spans (#22533)
Additional commits viewable in compare view

Updates @tanstack/virtual-core from 3.17.5 to 3.17.6

Release notes

Sourced from @tanstack/virtual-core's releases.

@tanstack/virtual-core@3.17.6

Patch Changes

#1236 7ae32b5 - Stop the default scroll-adjustment heuristic from drifting the viewport when a viewport-spanning item grows. Previously any item whose top sat above the fold (itemStart < scrollOffset) had its size delta compensated on every re-measure — including a streaming chat message that spans the fold and grows at its bottom, dragging scrollTop downward token by token (#1218). Re-measurements now only compensate items that are entirely above the fold (itemStart + itemSize <= scrollOffset); growth below the anchor point leaves the scroll position untouched. First measurements (estimate→actual) still compensate any above-fold item, and a custom shouldAdjustScrollPositionOnItemSizeChange still overrides the default.

Changelog

Sourced from @tanstack/virtual-core's changelog.

3.17.6

Patch Changes

#1236 7ae32b5 - Stop the default scroll-adjustment heuristic from drifting the viewport when a viewport-spanning item grows. Previously any item whose top sat above the fold (itemStart < scrollOffset) had its size delta compensated on every re-measure — including a streaming chat message that spans the fold and grows at its bottom, dragging scrollTop downward token by token (#1218). Re-measurements now only compensate items that are entirely above the fold (itemStart + itemSize <= scrollOffset); growth below the anchor point leaves the scroll position untouched. First measurements (estimate→actual) still compensate any above-fold item, and a custom shouldAdjustScrollPositionOnItemSizeChange still overrides the default.

Commits

32b2f2b ci: Version Packages (#1238)
ef6e92a docs(virtual-core): clarify shouldAdjustScrollPositionOnItemSizeChange usage ...
7ae32b5 fix(virtual-core): stop viewport-spanning item growth from drifting scroll (#...
See full diff in compare view

Updates posthog-js from 1.405.3 to 1.407.2

Release notes

Sourced from posthog-js's releases.

posthog-js@1.407.2

1.407.2

Patch Changes

#4224 ba7042b Thanks @turnipdabeets! - Fix session replay recordings being unplayable after the session rotated in a tab with no user interaction. When a session expired and rotated (for example in a long-lived background tab), a recorder that had not yet seen user interaction kept attributing snapshots — including full snapshots — to the previous session, so the new session never received a playable full snapshot. The recorder now restarts on rotation in this state, re-syncs its session id from the session manager if they ever diverge, and flushes its buffer on the normal cadence before the first user interaction instead of holding data until the next rotation or page unload. (2026-07-23)

posthog-js@1.407.1

1.407.1

Patch Changes

#4218 33f0bd7 Thanks @marandaneto! - Send ISO feature flag timestamps in request bodies, use numeric sent_at query timestamps for capture POSTs, and preserve _ cache busting for dynamic GET requests. (2026-07-23)

posthog-js@1.407.0

1.407.0

Minor Changes

#4222 0f2407b Thanks @turnipdabeets! - feat: add a default-value option to isFeatureEnabled

isFeatureEnabled(key, { defaultValue: false }) now returns the given default when the flag has no value — flags not loaded yet, or no flag with that key — and the return type narrows to boolean. The option name is the same in posthog-js, posthog-js-lite, and posthog-react-native. Without defaultValue, behavior is unchanged: boolean | undefined. (2026-07-22)

Patch Changes

#4203 90e7483 Thanks @posthog! - fix(conversations): let users start a new conversation while a ticket is still open

The support widget now surfaces the ticket list navigation (and its "New conversation" button) whenever the user has any ticket, instead of only when they have multiple tickets or a single resolved one. Previously a user sitting on one open, unresolved ticket was locked into that conversation with no way to raise a second issue. (2026-07-22)

#4221 da6e082 Thanks @posthog! - fix(exception-autocapture): don't throw when the page's onerror handler is non-callable

The wrapped window.onerror, window.onunhandledrejection, and console.error handlers chained to the page's original handler using optional chaining, which only guards against null/undefined. When a page had one of these set to a truthy non-callable value (e.g. via Object.defineProperty, or clobbered by another script/extension), our wrapper threw a TypeError from inside its own handler. We now check the original handler is actually callable before invoking it and fall back to false otherwise. (2026-07-22)

#4209 569fc62 Thanks @posthog! - Session recording no longer emits an uncaught TypeError: Illegal invocation from the input observer's synchronous native-setter call. The previous fix only guarded the deferred hooked setter; the synchronous original.set.call(this, value) still ran with a non-native this (a proxy, custom element, or cross-realm object) and threw inside the host page's own assignment. The recorder now probes the native getter — which fails the same internal-slot brand check as the setter — before forwarding: a non-native this is skipped, so the recorder no longer re-throws from its own frame, while genuine elements (including file inputs that legitimately throw on a programmatic value) keep their native behavior. The input event handler and getInputType are similarly guarded against reading native accessors on a non-native this. (2026-07-22)

#4068 d5e1188 Thanks @posthog! - Fix event-triggered surveys re-displaying in a fresh session without their trigger firing. A non-repeatable event/action-triggered survey that was shown but never dismissed or answered had its activation persisted indefinitely, so it kept being treated as "triggered" on later page loads. The persisted activation is now scoped to the triggering session: it still survives a reload within that session, but a brand-new session drops it until the trigger fires again. Repeatable surveys are unaffected. (2026-07-22)

#4205 de3ad61 Thanks @posthog! - Warn when session recording masking options in posthog.init shadow the project-level "Privacy and masking" setting. Client-side masking still intentionally takes precedence, but previously the override was silent — a developer could set masking in the dashboard and see it quietly ignored because their SDK config diverged. The recorder now logs a console warning (in debug mode) naming the diverging fields so the precedence is self-explaining.

... (truncated)

Commits

2408167 chore: update versions and lockfile [version bump]
ba7042b fix(replay): follow session rotation while _isIdle is unknown (#4224)
7c00f92 chore: update versions and lockfile [version bump]
96bd6b6 feat(react-native): Expo plugin dotenvFile option for upload credentials (#4219)
6c8fde0 fix(node): normalize V8 promise index frames (#4234)
f6f03aa docs: document non-interactive Playwright runs (#4232)
011a29c chore: update versions and lockfile [version bump]
33f0bd7 fix(browser): scope request timestamps by endpoint (#4218)
cbf798a fix(test): relax flush retry timing threshold from 500ms to 1000ms (#4207)
0f8be51 chore(deps): bump next from 14.2.33 to 15.5.21 in /playground/react-nextjs in...
Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.7 to 3.14.8

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.8

Patch Changes

#1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

Updated dependencies [7ae32b5]:

@tanstack/virtual-core@3.17.6

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.8

Patch Changes

#1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

Updated dependencies [7ae32b5]:

@tanstack/virtual-core@3.17.6

Commits

32b2f2b ci: Version Packages (#1238)
aa536e7 fix(react-virtual): grow size container before scroll sync on end-anchored pr...
See full diff in compare view

Updates lucide-react from 1.25.0 to 1.26.0

Release notes

Sourced from lucide-react's releases.

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Commits

See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates shadcn from 4.13.1 to 4.14.1

Release notes

Sourced from shadcn's releases.

shadcn@4.14.1

Patch Changes

#11266 6cd3f4c65c361ab6554e06a77e6a0af9cf8b6e37 Thanks @shadcn! - Add Base UI Toast support.

shadcn@4.14.0

Minor Changes

#11241 3c26ee2dbd3a772c1cddc2c76249cc1cb0a250d5 Thanks @shadcn! - add support for icon migration

Changelog

Sourced from shadcn's changelog.

4.14.1

Patch Changes

#11266 6cd3f4c65c361ab6554e06a77e6a0af9cf8b6e37 Thanks @shadcn! - Add Base UI Toast support.

4.14.0

Minor Changes

#11241 3c26ee2dbd3a772c1cddc2c76249cc1cb0a250d5 Thanks @shadcn! - add support for icon migration

Commits

9caf1d1 chore(release): version packages (#11267)
6cd3f4c feat: add Base UI toast (#11266)
91f21df test(shadcn): consolidate test suite and cover untested modules (#11247)
3f47b91 chore(release): version packages (#11244)
3c26ee2 feat(shadcn): migrate icons between any icon libraries (#11241)
See full diff in compare view

Updates @astrojs/starlight from 0.41.3 to 0.41.4

Release notes

Sourced from @astrojs/starlight's releases.

@astrojs/starlight@0.41.4

Patch Changes

#3936 712eedd Thanks @miichom! - Fixes support for modifying Zod enums when passing an extend option to Starlight’s docsSchema()

#4092 0896b91 Thanks @delucis! - Fixes support for links containing a protocol like mailto: in the sidebar

#4088 4486ba4 Thanks @delucis! - Simplifies Starlight’s client-side sidebar state persistence script slightly

Changelog

Sourced from @astrojs/starlight's changelog.

0.41.4

Patch Changes

#3936 712eedd Thanks @miichom! - Fixes support for modifying Zod enums when passing an extend option to Starlight’s docsSchema()

#4092 0896b91 Thanks @delucis! - Fixes support for links containing a protocol like mailto: in the sidebar

#4088 4486ba4 Thanks @delucis! - Simplifies Starlight’s client-side sidebar state persistence script slightly

Commits

ab2792b [ci] release (#4090)
712eedd fix: invalid option error when modifying enums in docsSchema's extend (#3936)
0896b91 Support links with any protocol in sidebars (#4092)
4486ba4 Remove pagehide event from sidebar persistence script (#4088)
See full diff in compare view

Updates @aws-sdk/client-s3 from 3.1091.0 to 3.1094.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1094.0

3.1094.0(2026-07-23)

New Features

client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)

client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)

client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)

client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)

client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)

client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)

client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)

client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)

client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

client-datazone: Adds support for notebook sync with S3 ipynb files (ce84e9c6)

client-bedrock-agentcore-control: Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points. (f845b470)

client-quicksight: Added new capabilities to custom permissions profiles to control access to Amazon Quick through the browser extension and Microsoft Word, Outlook, Excel, and PowerPoint add-ins. (59a1b6eb)

client-backup-gateway: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (2bfb9913)

client-bedrock-agentcore: Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points. (a689531c)

For list of updated packages, view updated-packages.md in assets-3.1094.0.zip

v3.1093.0

3.1093.0(2026-07-22)

Documentation Changes

client-elastic-load-balancing-v2: This adds CLI examples for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6. (2e38710d)

New Features

clients: update client endpoints as of 2026-07-22 (8e084a49)

client-arc-region-switch: Adds support for a client token in StartPlanExecution to make plan execution requests idempotent for safe retries. (6cfe2c05)

client-pcs: AWS PCS Node Lifecycle Actions provides a structured way to run custom scripts at defined points in a compute node's lifecycle directly through the AWS PCS compute node group API. (c3c4289a)

client-partnercentral-account: Adds Qualifications Association APIs that enable partners to associate a subsidiary account's qualifications with a primary account. Once associated, qualifications are shared across all connected accounts and scorecards are consolidated. Partners can start and track association and disassociation. (4b0d8db8)

client-sesv2: Launching DEED and MREP in US GOV (29718039)

client-observabilityadmin: Enablement for ALB and Bedrock Knowledge Base logs via Observability Admin Telemetry Rule for account and organization level (0bd549cf)

client-amp: Add CloudWatch dataset destinations for Amazon Managed Service for Prometheus collectors. (3709a0bd)

client-cloudwatch: Adds documented value constraints for CloudWatch Log Alarm scheduled query configuration fields, and makes LogGroupIdentifiers optional for log alarms. (5884c0d4)

client-guardduty: Amazon GuardDuty now returns filter lifecycle metadata in GetFilter responses. The response includes createdAt and updatedAt timestamps and a version number that increments on each update, giving you visibility into when a filter was created and last modified. (15117c91)

For list of updated packages, view updated-packages.md in assets-3.1093.0.zip

v3.1092.0

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1094.0 (2026-07-23)

Note: Version bump only for package @aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @aws-sdk/client-s3

Commits

c379112 Publish v3.1094.0
0f79b6a Publish v3.1093.0
80f0df5 Publish v3.1092.0
See full diff in compare view

Updates @sentry/bun from 10.67.0 to 10.68.0

Release notes

Sourced from @sentry/bun's releases.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/bun's changelog.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilt...
Description has been truncated

…y with 15 updates Bumps the production-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.68.0` | | [@tanstack/virtual-core](https://github.com/TanStack/virtual/tree/HEAD/packages/virtual-core) | `3.17.5` | `3.17.6` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.405.3` | `1.407.2` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.7` | `3.14.8` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.26.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.13.1` | `4.14.1` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.3` | `0.41.4` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1091.0` | `3.1094.0` | | [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.68.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.68.0` | | [add-mcp](https://github.com/neon-solutions/add-mcp) | `1.13.0` | `2.0.0` | | [hono](https://github.com/honojs/hono) | `4.12.31` | `4.12.32` | Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `@sentry/browser` from 10.67.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.68.0) Updates `@tanstack/virtual-core` from 3.17.5 to 3.17.6 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/virtual-core/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/virtual-core@3.17.6/packages/virtual-core) Updates `posthog-js` from 1.405.3 to 1.407.2 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.405.3...posthog-js@1.407.2) Updates `@tanstack/react-virtual` from 3.14.7 to 3.14.8 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.8/packages/react-virtual) Updates `lucide-react` from 1.25.0 to 1.26.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.26.0/packages/lucide-react) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `shadcn` from 4.13.1 to 4.14.1 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.14.1/packages/shadcn) Updates `@astrojs/starlight` from 0.41.3 to 0.41.4 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.4/packages/starlight) Updates `@aws-sdk/client-s3` from 3.1091.0 to 3.1094.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1094.0/clients/client-s3) Updates `@sentry/bun` from 10.67.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.68.0) Updates `@sentry/node` from 10.67.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.68.0) Updates `add-mcp` from 1.13.0 to 2.0.0 - [Release notes](https://github.com/neon-solutions/add-mcp/releases) - [Changelog](https://github.com/neon-solutions/add-mcp/blob/main/CHANGELOG.md) - [Commits](neon-solutions/add-mcp@v1.13.0...v2.0.0) Updates `hono` from 4.12.31 to 4.12.32 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.31...v4.12.32) --- updated-dependencies: - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@sentry/browser" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/virtual-core" dependency-version: 3.17.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: posthog-js dependency-version: 1.407.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: shadcn dependency-version: 4.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@astrojs/starlight" dependency-version: 0.41.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1094.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/bun" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: add-mcp dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.12.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

greptile-apps · 2026-07-24T10:38:37Z

PR author is in the excluded authors list.

socket-security · 2026-07-24T10:40:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	posthog-js@1.407.2
	@tanstack/react-virtual@3.14.8
	hono@4.12.32
	@tanstack/virtual-core@3.17.6
	add-mcp@2.0.0
	@sentry/browser@10.68.0
	lucide-react@1.26.0
	react@19.2.8
	@astrojs/starlight@0.41.4
	shadcn@4.14.1
	@sentry/bun@10.68.0
	react-dom@19.2.8
	@sentry/node@10.68.0
	@aws-sdk/client-s3@3.1094.0

View full report

socket-security · 2026-07-24T10:40:41Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@sentry/node-core` is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: pnpm-lock.yaml → `npm/@sentry/node@10.68.0` → `npm/@sentry/node-core@10.68.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.68.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2026-07-27T09:31:33Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026

dependabot Bot closed this Jul 27, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-6d604c7e1d branch July 27, 2026 09:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 15 updates#243

chore(deps): bump the production-dependencies group across 1 directory with 15 updates#243
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-6d604c7e1d

dependabot Bot commented on behalf of github Jul 24, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Jul 24, 2026

Uh oh!

socket-security Bot commented Jul 24, 2026

Uh oh!

socket-security Bot commented Jul 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.68.0

Bundle size 📦

10.68.0

@​tanstack/virtual-core@​3.17.6

Patch Changes

3.17.6

Patch Changes

posthog-js@1.407.2

1.407.2

Patch Changes

posthog-js@1.407.1

1.407.1

Patch Changes

posthog-js@1.407.0

1.407.0

Minor Changes

Patch Changes

@​tanstack/react-virtual@​3.14.8

Patch Changes

3.14.8

Patch Changes

Version 1.26.0

What's Changed

New Contributors

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

shadcn@4.14.1

Patch Changes

shadcn@4.14.0

Minor Changes

4.14.1

Patch Changes

4.14.0

Minor Changes

@​astrojs/starlight@​0.41.4

Patch Changes

0.41.4

Patch Changes

v3.1094.0

3.1094.0(2026-07-23)

New Features

v3.1093.0

3.1093.0(2026-07-22)

Documentation Changes

New Features

v3.1092.0

3.1094.0 (2026-07-23)

3.1093.0 (2026-07-22)

3.1092.0 (2026-07-21)

10.68.0

Bundle size 📦

10.68.0

Uh oh!

greptile-apps Bot commented Jul 24, 2026

Uh oh!

socket-security Bot commented Jul 24, 2026

Uh oh!

socket-security Bot commented Jul 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 24, 2026 •

edited

Loading

`@tanstack/virtual-core@3`.17.6

`@tanstack/react-virtual@3`.14.8

`@astrojs/starlight@0`.41.4